Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CtluxjuoVCUc7NZH58EMKO_7Fek.roa
File: CtluxjuoVCUc7NZH58EMKO_7Fek.roa (raw, json)
Hash identifier: zCbAAnVHYfKfDVaHx5my5US+/SNGnWFSSEEe55TiWBQ=
Subject key identifier: 0A:D9:6E:C6:3B:A8:54:25:1C:EC:D6:47:E7:C1:0C:28:EF:FB:15:E9
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0186BDE9C93DC8FB2E7426DF0B2CA9F6020D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CtluxjuoVCUc7NZH58EMKO_7Fek.roa
Signing time: Tue 07 Mar 2023 21:11:00 +0000
ROA not before: Tue 07 Mar 2023 21:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204748
IP address blocks: 195.55.62.0/24 maxlen: 24
195.55.63.0/24 maxlen: 24
195.77.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:e9:c9:3d:c8:fb:2e:74:26:df:0b:2c:a9:f6:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 7 21:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ad96ec63ba854251cecd647e7c10c28effb15e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:70:a4:9a:5e:e5:ba:e5:f5:74:af:03:06:
dc:fa:cd:5f:b0:0a:be:65:f7:3f:dd:61:e5:46:4f:
53:fc:b9:af:07:09:25:d3:c4:83:08:60:8d:63:47:
b0:30:6e:2f:b4:8d:49:c0:40:18:8e:12:41:17:c5:
a9:6a:ed:97:4d:d0:d4:74:9b:5e:8f:98:d0:3d:aa:
b2:27:2f:df:c3:32:18:35:55:8a:fa:3d:fd:07:42:
64:83:5d:ff:1c:75:70:7f:4f:03:d4:23:51:90:30:
3a:9a:fa:cf:e4:54:03:3d:78:33:73:42:02:c9:60:
f5:b7:8b:91:0a:70:bb:e0:7c:84:53:21:24:ae:51:
64:17:0b:07:bb:d1:40:18:1a:9f:95:05:06:3c:a1:
75:24:6a:7f:8c:ae:d2:09:bd:7f:6c:a2:96:c0:c3:
24:37:8d:8a:85:50:81:44:e2:b4:91:4b:3a:3d:d9:
62:e5:75:0f:c4:cf:70:28:c8:b2:66:c4:4e:cb:b7:
50:8c:39:71:bd:75:3d:c0:9a:e9:03:4b:44:9d:e8:
32:b7:5a:9a:18:0c:27:ca:76:ce:d6:d0:63:4e:1d:
96:3e:b9:75:a7:f8:61:78:73:61:a0:33:eb:2a:07:
5b:12:c3:b2:f2:90:92:c7:c9:8a:c7:2b:79:28:21:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:6E:C6:3B:A8:54:25:1C:EC:D6:47:E7:C1:0C:28:EF:FB:15:E9
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CtluxjuoVCUc7NZH58EMKO_7Fek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.62.0/23
195.77.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:4d:6d:63:11:df:49:18:b8:4b:97:dd:c1:74:d1:ba:00:f2:
9b:f8:a9:09:46:a9:28:25:6a:51:69:89:c1:0f:96:8d:7e:d3:
fd:82:f0:67:3e:7f:02:4e:ba:d9:4e:b0:fa:f1:12:c2:53:58:
95:43:4d:75:a8:fb:94:09:dc:5a:80:44:5b:3a:c9:7e:91:4d:
3b:e0:81:bc:9f:50:c0:41:c5:cb:2b:5a:db:f1:ed:82:65:e2:
ab:69:19:39:3a:dc:9e:3e:dc:28:b8:c7:67:e3:f4:2f:3a:72:
de:1d:25:73:e0:63:7d:57:51:da:b5:93:64:e0:37:0d:3c:9a:
3d:03:c1:b3:b2:3f:1e:c3:03:ac:c8:11:86:7f:09:c2:70:38:
18:4d:70:81:8c:c2:ee:19:59:c9:20:1a:c6:c2:67:86:df:2b:
1b:3b:db:b9:d0:b4:19:32:9d:c3:65:a0:ad:fe:19:9e:4c:7d:
2d:5f:ce:34:6e:08:93:4e:94:e1:57:47:8b:2d:4f:0b:ef:3e:
3b:54:b6:d4:cc:bd:2d:01:85:3e:31:11:3d:ab:13:3a:a6:30:
58:72:42:c6:9b:92:9a:2a:92:43:54:93:36:fe:76:5e:0c:c6:
29:4c:66:3b:05:ed:33:a9:ad:c3:d5:65:b5:73:d5:34:27:3f:
2d:aa:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net